Awesome-Azure-Pentest

Azure security toolkit

A curated collection of tools and resources for penetration testing and securing Microsoft Azure cloud services

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

GitHub

1k stars
17 watching
188 forks
last commit: over 2 years ago
Linked from 2 awesome lists


Awesome Azure Penetration Testing / Tools / Enumeration

o365creeper328about 6 years agoEnumerate valid email addresses
CloudBrute913about 2 years agoTool to find a cloud infrastructure of a company on top Cloud providers
cloud_enum1,711almost 2 years agoMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud
Azucar565almost 4 years agoSecurity auditing tool for Azure environments
CrowdStrike Reporting Tool for Azure (CRT)711over 3 years agoQuery Azure AD/O365 tenants for hard to find permissions and configuration settings
ScoutSuite6,794almost 2 years agoMulti-cloud security auditing tool. Security posture assessment of different cloud environments
BlobHunter321about 2 years agoA tool for scanning Azure blob storage accounts for publicly opened blobs
Grayhat WarfareOpen Azure blobs and AWS bucket search
Office 365 User Enumeration248over 2 years agoEnumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1 or office.com login page
CloudFox1,983almost 2 years agoAutomating situational awareness for cloud penetration tests
Monkey365862almost 2 years agoConduct Microsoft 365, Azure subscriptions and Azure Active Directory security configuration reviews
Azure-AccessPermissions106over 3 years agoPowerShell script to enumerate access permissions in an Azure AD environment
Prowler10,941almost 2 years agoPerform AWS and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness

Awesome Azure Penetration Testing / Tools / Information Gathering

o365recon695about 4 years agoInformation gathering with valid credentials to Azure
Get-MsolRolesAndMembers.ps1Retrieve list of roles and associated role members
ROADtools1,938almost 2 years agoFramework to interact with Azure AD
PowerZure1,119about 2 years agoPowerShell framework to assess Azure security
Azurite250over 7 years agoEnumeration and reconnaissance activities in the Microsoft Azure Cloud
Sparrow.ps11,418over 3 years agoHelps to detect possible compromised accounts and applications in the Azure/M365 environment
Hawk722almost 2 years agoPowershell based tool for gathering information related to O365 intrusions and potential breaches
Microsoft Azure AD Assessment761over 2 years agoTooling for assessing an Azure AD tenant state and configuration
Cloud Katana250over 2 years agoUnlocking Serverless Computing to Assess Security Controls
SCuBA M365 Security Baseline Assessment Tool1,813almost 2 years agoAutomation to assess the state of your M365 tenant against CISA's baselines

Awesome Azure Penetration Testing / Tools / Lateral Movement

Stormspotter1,555over 2 years agoAzure Red Team tool for graphing Azure and Azure Active Directory objects
AzureADLateralMovement123almost 4 years agoLateral Movement graph for Azure Active Directory
SkyArk877almost 4 years agoDiscover, assess and secure the most privileged entities in Azure and AWS
omigood (OM I GOOD?)18about 5 years agoScanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities

Awesome Azure Penetration Testing / Tools / Exploitation

MicroBurst2,068almost 2 years agoA collection of scripts for assessing Microsoft Azure security
azuread_decrypt_msol_v2.ps1Decrypt Azure AD MSOL service account
Microsoft-Teams-GIFShell224about 4 years agoMicrosoft Teams can be leveraged by an attacker, to execute a reverse shell between an attacker and victim piped through malicious GIFs sent in Teams messages
MSOLSpray918over 2 years agoA password spraying tool for Microsoft Online accounts (Azure/O365)
MSOLSpray.py85over 2 years agoA Python version of the MSOLSpray password spraying tool for Microsoft Online accounts (Azure/O365)
o365spray785almost 2 years agoUsername enumeration and password spraying tool aimed at Microsoft O365
MFASweep1,393almost 2 years agoA tool for checking if MFA is enabled on multiple Microsoft Services Resources
adconnectdump641almost 2 years agoDump Azure AD Connect credentials for Azure AD and Active Directory

Awesome Azure Penetration Testing / Resources / Articles

Abusing Azure AD SSO with the Primary Refresh Token
Abusing dynamic groups in Azure AD for Privilege Escalation
Attacking Azure, Azure AD, and Introducing PowerZure
Attacking Azure & Azure AD, Part II
Azure AD Connect for Red Teamers
Azure AD Introduction for Red Teamers
Azure AD Pass The Certificate
Azure AD privilege escalation - Taking over default application permissions as Application Admin
Defense and Detection for Attacks Within Azure
Hunting Azure Admins for Vertical Escalation
Impersonating Office 365 Users With Mimikatz
Lateral Movement from Azure to On-Prem AD
Malicious Azure AD Application Registrations
Moving laterally between Azure AD joined machines
CrowdStrike Launches Free Tool to Identify and Help Mitigate Risks in Azure Active Directory
Privilege Escalation Vulnerability in Azure Functions
Azure Application Proxy C2
Recovering Plaintext Passwords from Azure Virtual Machines like It’s the 1990s
Forensicating Azure VMs
Network Forensics on Azure VMs
Cross-Account Container Takeover in Azure Container Instances
Azure Active Directory password brute-forcing flaw
How to Detect Azure Active Directory Backdoors: Identity Federation
Azure App Service vulnerability exposed hundreds of source code repositories
AutoWarp: Cross-Account Vulnerability in Microsoft Azure Automation Service
Microsoft Azure Synapse Pwnalytics
Microsoft Azure Site Recovery DLL Hijacking
FabriXss (CVE-2022-35829): Abusing a Custom Role User Using CSTI and Stored XSS in Azure Fabric Explorer
Untangling Azure Active Directory Principals & Access Permissions
How to Detect OAuth Access Token Theft in Azure
How to deal with Ransomware on Azure
How Orca found Server-Side Request Forgery (SSRF) Vulnerabilities in four different Azure Services
EmojiDeploy: Smile! Your Azure web service just got RCE’d
Bounce the Ticket and Silver Iodide on Azure AD Kerberos
List of all Microsoft Portals
Azure Articles from NetSPI
Azure Cheat Sheet on CloudSecDocs
Resources about Azure from Cloudberry Engineering
Resources from PayloadsAllTheThings61,904almost 2 years ago
Encyclopedia on Hacking the Cloud
Azure AD - Attack and Defense Playbook2,183almost 2 years ago
Azure Security Resources and Notes1,497over 2 years ago
Azure Threat Research Matrix

Awesome Azure Penetration Testing / Resources / Lab Exercises

azure-security-lab60almost 8 years agoSecuring Azure Infrastructure - Hands on Lab Guide
AzureSecurityLabs46over 6 years agoHands-on Security Labs focused on Azure IaaS Security
Building Free Active Directory Lab in Azure
Aria Cloud Penetration Testing Tools Container132over 5 years agoA Docker container for remote penetration testing
PurpleCloud535almost 2 years agoMulti-use Hybrid + Identity Cyber Range implementing a small Active Directory Domain in Azure alongside Azure AD and Azure Domain Services
BlueCloud126almost 4 years agoCyber Range system with a Windows VM for security testing with Azure and AWS Terraform support
Azure Red Team Attack and Detect Workshop610over 3 years ago
SANS Workshop – Building an Azure Pentest Lab for Red TeamsThe link in the description contains a password-protected OVA file that can be used until 2nd March 2024

Awesome Azure Penetration Testing / Resources / Talks and Videos

Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD

Awesome Azure Penetration Testing / Resources / Talks and Videos / Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD

Presentation Slides

Awesome Azure Penetration Testing / Resources / Talks and Videos

TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory

Awesome Azure Penetration Testing / Resources / Talks and Videos / TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory

Presentation Slides

Awesome Azure Penetration Testing / Resources / Talks and Videos

Dirk Jan Mollema - Im In Your Cloud Pwning Your Azure Environment - DEF CON 27 Conference

Awesome Azure Penetration Testing / Resources / Talks and Videos / Dirk Jan Mollema - Im In Your Cloud Pwning Your Azure Environment - DEF CON 27 Conference

Presentation Slides

Awesome Azure Penetration Testing / Resources / Talks and Videos

Adventures in Azure Privilege Escalation Karl Fosaaen

Awesome Azure Penetration Testing / Resources / Talks and Videos / Adventures in Azure Privilege Escalation Karl Fosaaen

Presentation Slides

Awesome Azure Penetration Testing / Resources / Talks and Videos

Introducing ROADtools - Azure AD exploration for Red Teams and Blue Teams

Awesome Azure Penetration Testing / Resources / Books

Pentesting Azure Applications

Backlinks from these awesome lists:

More related projects: